Kameleo Detection
How to detect Kameleo in 2026
Kameleo is a desktop antidetect browser built around custom Chromium and Firefox engines, locally stored profiles, and first-class automation hooks for Selenium, Puppeteer, and Playwright. Every profile it launches claims to be a different, ordinary consumer device. Sentinel doesn't take that claim at face value — it tests it against the browser engine, the network the session arrived on, and the device's history with your product.
What Kameleo is
Kameleo sells per-seat subscriptions rather than per-profile plans, and markets unlimited locally stored profiles as a differentiator: profiles live on the operator's machine, not in a vendor cloud. It ships its own Chromium- and Firefox-based engines, supports mobile-device profiles via an Android app, and exposes a local API for driving profiles with Selenium, Puppeteer, or Playwright. None of that is secret — it's Kameleo's own marketing — and it tells you exactly what a Kameleo session will try to look like: a fresh, believable consumer device, often scripted at scale.
How Sentinel flags Kameleo sessions
Sentinel doesn't keep a signature database of antidetect brands, and it doesn't need to recognise Kameleo by name. It asks whether the device a session claims to be is internally consistent, whether a machine is driving it, and whether the network path and account history around it fit a real person. A Kameleo session has to beat every layer at once.
Antidetect-browser signal
The device layer recognises traits characteristic of antidetect engines as a class and returns device.antidetect with the antidetect_browser reason code — it fires on the category of tooling, not on one vendor's build, so a Kameleo version bump doesn't reset detection.
Browser-tampering score
device.tampering_score is a 0–1 measure of how heavily the fingerprint surface has been altered. Above 0.6 strongly suggests an antidetect browser; 0.3–0.6 flags softer inconsistencies. Spoofed profiles must keep dozens of claims coherent — engine internals that don't match the claimed Chrome build, or platform behaviour that contradicts the claimed OS, push the score up.
VM & emulator detection
Profile farms often run Kameleo seats inside virtual machines for isolation. Virtualisation and emulation are scored independently of the browser profile and surface as device.virtual_machine and device.emulator.
Automation signal
Kameleo openly advertises Selenium, Puppeteer, and Playwright control. When a profile is driven by an automation framework rather than a human, the bot signal trips: device.automation, reason automation_detected.
The network tell
Antidetect sessions almost never arrive from the operator's own home IP. Sentinel's Spur-powered network layer flags residential proxies and VPN exits independently of the device — a flawless profile still has to come from somewhere.
Device history
device.times_seen counts how often this device has hit your endpoints before, and passing your accountId enables multi-account linking: linked_accounts > 1 behind a "brand-new customer" is the classic farm-reuse tell.
Honest limit: no fraud vendor catches every Kameleo session every time, and Kameleo ships updates specifically to close the tells detection depends on. That's why Sentinel returns the individual signals and a 0–100 risk score instead of an unexplained yes/no — you combine the antidetect, tampering, automation, network, and history signals with your own rules to decide when to block, when to review, and when to step up verification.
How to integrate
Embed the Sentinel SDK on your signup, login, or checkout page, then call /v1/evaluate server-side with the SDK token. The response carries the device block, the network block, and machine-readable reason codes. Full request/response shapes are in the API reference; the underlying technique is covered in the 2026 antidetect detection deep-dive. For the tool-specific breakdown, see Kameleo under the microscope: lab notes on every signal and our live test, where Kameleo scored 100.
See what a Kameleo profile scores against real signals.
Free tier: 1,000 requests/hour. No credit card, no expiry. Free during open beta.